13 matches found
EUVD-2005-1300
Malware in sbrugna...
CVE-2005-1295
Technical details (affected products, precise root cause, affected versions, and exploitability) are not publicly provided in the supplied documents. Monitor for updates from official advisories.
CVE-2005-1296
The CVE-2005-1296 issue involves an include.cgi script that allows remote attackers to execute arbitrary commands via shell metacharacters in the argument. The available data indicate a remote, network-accessible flaw with a CVSSv2 base score of 7.5 (High) and partial impacts to confidentiality, ...
CVE-2005-1297
CVE-2005-1297 concerns a cross-site scripting (XSS) vulnerability in the include.cgi script that allows remote attackers to inject arbitrary web script or HTML via the argument. Affected component: include.cgi. Root cause: insufficient input sanitization in include.cgi leading to script injection...
CVE-2005-1296
include.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...
CVE-2005-1297
Cross-site scripting XSS vulnerability in the include.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument...
CVE-2005-1296: Undefined Security Weakness
include.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...
remote command execution in include.cgi script
Tunis 24/04/2005 BUG found by fireboy [email protected] THERE ARE SOME BUGS IN include.cgi SCRIPT THAT CAN SHOW SENSILBLES FILES IN A SYSTEM OR EXECUTE COMMANDS IN THE TARGET HOST WICH CAN COMPROMISE IT. IT IS ONLY FOR SECURITY AND EDUCATIONAL PURPOSE 1file showing...
CVE-2005-1295: Undefined Security Weakness
include.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...
CVE-2005-1297: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the include.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument...
CVE-2005-1295
include.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...